switchroom 0.18.13 → 0.18.15

package/dist/agent-scheduler/index.js

@@ -11187,7 +11187,6 @@ var TelegramChannelSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
   plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-  rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
@@ -13636,19 +13635,30 @@ class JsonlAuditSink {
 }
 
 // src/scheduler/quota-preflight.ts
-function decideQuotaPreflight(state) {
+function decideQuotaPreflight(state, opts = {}) {
+  const now = opts.now ?? Date.now();
   const accounts = state.accounts ?? [];
   if (accounts.length === 0) {
     return { defer: false, reason: "no accounts in broker state" };
   }
   const healthy = accounts.filter((a) => !a.exhausted);
-  if (healthy.length > 0) {
+  if (healthy.length === 0) {
+    return { defer: true, reason: `all ${accounts.length} account(s) exhausted` };
+  }
+  const effectiveLabel = (opts.agent !== undefined ? (state.agents ?? []).find((a) => a.name === opts.agent)?.account : undefined) ?? state.active;
+  const effective = accounts.find((a) => a.label === effectiveLabel);
+  if (effective !== undefined && !effective.exhausted && effective.throttled_until !== undefined && effective.throttled_until > now) {
+    const inS = Math.ceil((effective.throttled_until - now) / 1000);
     return {
-      defer: false,
-      reason: `${healthy.length}/${accounts.length} account(s) healthy`
+      defer: true,
+      reason: `account '${effective.label}' rate-throttled (clears in ${inS}s)`,
+      retryAtMs: effective.throttled_until
     };
   }
-  return { defer: true, reason: `all ${accounts.length} account(s) exhausted` };
+  return {
+    defer: false,
+    reason: `${healthy.length}/${accounts.length} account(s) healthy`
+  };
 }
 
 // src/auth/broker/client.ts
@@ -13685,6 +13695,12 @@ var MarkExhaustedRequestSchema = exports_external.object({
   id: exports_external.string().min(1),
   until: exports_external.number().int().positive().optional()
 });
+var MarkThrottledRequestSchema = exports_external.object({
+  v: exports_external.literal(PROTOCOL_VERSION),
+  op: exports_external.literal("mark-throttled"),
+  id: exports_external.string().min(1),
+  until: exports_external.number().int().positive()
+});
 var RefreshAccountRequestSchema = exports_external.object({
   v: exports_external.literal(PROTOCOL_VERSION),
   op: exports_external.literal("refresh-account"),
@@ -13785,6 +13801,7 @@ var RequestSchema2 = exports_external.discriminatedUnion("op", [
   ListStateRequestSchema,
   SetActiveRequestSchema,
   MarkExhaustedRequestSchema,
+  MarkThrottledRequestSchema,
   RefreshAccountRequestSchema,
   AddAccountRequestSchema,
   RmAccountRequestSchema,
@@ -13804,6 +13821,7 @@ var AccountStateSchema = exports_external.object({
   expiresAt: exports_external.number().optional(),
   exhausted: exports_external.boolean(),
   exhausted_until: exports_external.number().optional(),
+  throttled_until: exports_external.number().optional(),
   threshold_violations: exports_external.number().int().nonnegative().optional(),
   last_refreshed_at: exports_external.number().optional()
 });
@@ -13834,6 +13852,12 @@ var MarkExhaustedDataSchema = exports_external.object({
   rolled: exports_external.array(exports_external.string()),
   rolledTo: exports_external.string().nullable().optional()
 });
+var MarkThrottledDataSchema = exports_external.object({
+  account: exports_external.string(),
+  throttled_until: exports_external.number(),
+  escalated: exports_external.boolean(),
+  rolledTo: exports_external.string().nullable().optional()
+});
 var RefreshAccountDataSchema = exports_external.object({
   account: exports_external.string(),
   expiresAt: exports_external.number().optional()
@@ -14059,6 +14083,15 @@ class AuthBrokerClient {
     const data = await this.send(req);
     return data;
   }
+  async markThrottled(until) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID(),
+      op: "mark-throttled",
+      until
+    });
+    return data;
+  }
   async claimNotification(key, windowMs) {
     const data = await this.send({
       v: PROTOCOL_VERSION,
@@ -14729,6 +14762,12 @@ var DEFAULT_MAX_QUOTA_DEFER_ATTEMPTS = 3;
 function defaultQuotaDeferBackoffMs(attempt) {
   return [60000, 180000, 300000][attempt] ?? 300000;
 }
+function resolveQuotaDeferDelayMs(decision, fallbackMs, nowMs) {
+  if (decision.retryAtMs === undefined)
+    return fallbackMs;
+  const target = decision.retryAtMs - nowMs + 2000;
+  return Math.min(Math.max(target, 5000), 10 * 60000);
+}
 function registerAgentSchedule(opts) {
   const tasks = [];
   const now = opts.now ?? Date.now;
@@ -14769,7 +14808,7 @@ function registerAgentSchedule(opts) {
             handle = scheduleRetry(() => {
               pendingRetries.delete(handle);
               attemptFire(attempt + 1);
-            }, backoff(attempt));
+            }, resolveQuotaDeferDelayMs(decision, backoff(attempt), now()));
             pendingRetries.add(handle);
           }
           return;
@@ -15124,10 +15163,10 @@ Briefly and plainly tell the user these scheduled runs did not ` + "happen so th
   }
   const cronLib = __require("node-cron");
   const quotaPreflightEnabled = process.env.SWITCHROOM_DISABLE_CRON_QUOTA_PREFLIGHT !== "1";
-  const quotaGate = quotaPreflightEnabled ? async () => {
+  const quotaGate = quotaPreflightEnabled ? async (agent) => {
     const client = new AuthBrokerClient;
     try {
-      return decideQuotaPreflight(await client.listState());
+      return decideQuotaPreflight(await client.listState(), { agent });
     } finally {
       await client.close().catch(() => {});
     }
@@ -15206,6 +15245,7 @@ if (import.meta.url === `file://${process.argv[1]}` && /(?:^|[/\\])agent-schedul
 export {
   scheduleSignature,
   resolveReloadPollMs,
+  resolveQuotaDeferDelayMs,
   resolveEntryThreadId,
   resolveChannelTarget,
   registerAgentSchedule,

package/dist/auth-broker/index.js

@@ -16816,7 +16816,6 @@ var TelegramChannelSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).describe("Master switch for the per-agent Telegram gateway sidecar. " + "When false, start.sh skips the gateway supervise loop and the " + "agent boots without bot-token requirements (smoke-test + " + "offline-dev use case)."),
   plugin: exports_external.enum(["switchroom", "official"]).optional().describe("Which Telegram MCP plugin to load. Default is 'switchroom' — the " + "enhanced fork with streaming edits, reactions, history, and " + "access control. Set to 'official' for the upstream marketplace " + "plugin (basic send/receive only)."),
   format: exports_external.enum(["html", "markdownv2", "text"]).optional().describe("Default reply format passed to the plugin"),
-  rate_limit_ms: exports_external.number().optional().describe("Minimum delay between outgoing messages in ms"),
   stream_mode: exports_external.enum(["pty", "checklist"]).optional().describe("How live progress is streamed to Telegram during a turn. " + "'pty' (default) surfaces text snapshots of Claude Code's TUI — " + "compatible but can flicker as Ink re-renders. 'checklist' drives " + "a structured progress card from session-tail events — stable " + "order, per-tool status emojis, fires only on semantic transitions."),
   stream_throttle_ms: exports_external.number().int().nonnegative().optional().describe("Throttle window in ms between successive in-place stream edits " + "during a turn. Lower = more responsive stream, higher = fewer API " + "calls. Floored at 250 by draft-stream itself. Default 400 ms for DMs " + "and 1000 ms for groups/forums (respects Telegram's ~1 edit/sec/message " + "practical ceiling). Override per-agent if a particular agent needs " + "snappier or quieter streaming."),
   clear_status_on_completion: exports_external.boolean().optional().describe("When true, the live activity/status feed (the in-place 'what it's " + "doing' message — Reading X, Searching the web for Y, …) is DELETED " + "when the turn's final answer lands, so only the reply remains. " + "Default false: the status message is left in the chat as a record " + "(its last step marked done) — no post-then-delete. Per-agent " + "override; cascades defaults → profile → agent (per-key)."),
@@ -18119,13 +18118,51 @@ import * as constants2 from "node:constants";
 import { createHash as createHash2 } from "node:crypto";
 import { dirname as dirname3, join as join8, resolve as resolve9 } from "node:path";
 
-// src/agents/compose.ts
-import { createHash } from "node:crypto";
-
 // src/agents/scaffold.ts
 import { join as join4, resolve as resolve5 } from "node:path";
 init_atomic();
 
+// src/agents/agent-uid.ts
+import { createHash } from "node:crypto";
+
+// src/broker-common/peercred-path.ts
+function matchSocketName(socketPath, patterns, maxNameLen) {
+  if (typeof socketPath !== "string" || socketPath.length === 0)
+    return null;
+  let name = null;
+  for (const re of patterns) {
+    const m = socketPath.match(re);
+    if (m && typeof m[1] === "string") {
+      name = m[1];
+      break;
+    }
+  }
+  if (name === null || name.length === 0)
+    return null;
+  if (maxNameLen !== undefined && name.length > maxNameLen)
+    return null;
+  return name;
+}
+
+// src/vault/broker/peercred.ts
+var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+function isReservedAgentName(name) {
+  return RESERVED_AGENT_NAMES.has(name);
+}
+
+// src/agents/agent-uid.ts
+var AGENT_UID_MIN = 10001;
+var AGENT_UID_MAX = 10999;
+function allocateAgentUid(name) {
+  if (isReservedAgentName(name)) {
+    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
+  }
+  const hash = createHash("sha256").update(name).digest();
+  const u32 = hash.readUInt32BE(0);
+  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
+  return AGENT_UID_MIN + u32 % range;
+}
+
 // src/config/timezone.ts
 var CONTAINER_DEFAULT_UTC_ZONES = new Set([
   "UTC",
@@ -18269,31 +18306,6 @@ var SCRYPT_MAXMEM = 128 * 1024 * 1024;
 import { homedir as homedir3 } from "node:os";
 import { join as join3 } from "node:path";
 
-// src/broker-common/peercred-path.ts
-function matchSocketName(socketPath, patterns, maxNameLen) {
-  if (typeof socketPath !== "string" || socketPath.length === 0)
-    return null;
-  let name = null;
-  for (const re of patterns) {
-    const m = socketPath.match(re);
-    if (m && typeof m[1] === "string") {
-      name = m[1];
-      break;
-    }
-  }
-  if (name === null || name.length === 0)
-    return null;
-  if (maxNameLen !== undefined && name.length > maxNameLen)
-    return null;
-  return name;
-}
-
-// src/vault/broker/peercred.ts
-var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-function isReservedAgentName(name) {
-  return RESERVED_AGENT_NAMES.has(name);
-}
-
 // src/vault/broker/protocol.ts
 var MAX_FRAME_BYTES = 64 * 1024;
 var AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
@@ -18635,17 +18647,6 @@ var DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin";
 var DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
 
 // src/agents/compose.ts
-var AGENT_UID_MIN = 10001;
-var AGENT_UID_MAX = 10999;
-function allocateAgentUid(name) {
-  if (isReservedAgentName(name)) {
-    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
-  }
-  const hash = createHash("sha256").update(name).digest();
-  const u32 = hash.readUInt32BE(0);
-  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
-  return AGENT_UID_MIN + u32 % range;
-}
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/auth/quota.ts
@@ -19765,6 +19766,12 @@ var MarkExhaustedRequestSchema = exports_external.object({
   id: exports_external.string().min(1),
   until: exports_external.number().int().positive().optional()
 });
+var MarkThrottledRequestSchema = exports_external.object({
+  v: exports_external.literal(PROTOCOL_VERSION),
+  op: exports_external.literal("mark-throttled"),
+  id: exports_external.string().min(1),
+  until: exports_external.number().int().positive()
+});
 var RefreshAccountRequestSchema = exports_external.object({
   v: exports_external.literal(PROTOCOL_VERSION),
   op: exports_external.literal("refresh-account"),
@@ -19865,6 +19872,7 @@ var RequestSchema2 = exports_external.discriminatedUnion("op", [
   ListStateRequestSchema,
   SetActiveRequestSchema,
   MarkExhaustedRequestSchema,
+  MarkThrottledRequestSchema,
   RefreshAccountRequestSchema,
   AddAccountRequestSchema,
   RmAccountRequestSchema,
@@ -19884,6 +19892,7 @@ var AccountStateSchema = exports_external.object({
   expiresAt: exports_external.number().optional(),
   exhausted: exports_external.boolean(),
   exhausted_until: exports_external.number().optional(),
+  throttled_until: exports_external.number().optional(),
   threshold_violations: exports_external.number().int().nonnegative().optional(),
   last_refreshed_at: exports_external.number().optional()
 });
@@ -19914,6 +19923,12 @@ var MarkExhaustedDataSchema = exports_external.object({
   rolled: exports_external.array(exports_external.string()),
   rolledTo: exports_external.string().nullable().optional()
 });
+var MarkThrottledDataSchema = exports_external.object({
+  account: exports_external.string(),
+  throttled_until: exports_external.number(),
+  escalated: exports_external.boolean(),
+  rolledTo: exports_external.string().nullable().optional()
+});
 var RefreshAccountDataSchema = exports_external.object({
   account: exports_external.string(),
   expiresAt: exports_external.number().optional()
@@ -20015,6 +20030,10 @@ function encodeError(id, code, message) {
 var AUTH_BROKER_ROOT = "/run/switchroom/auth-broker";
 var REFRESH_TICK_INTERVAL_MS = 60 * 1000;
 var MARK_EXHAUSTED_DEFAULT_MS = 5 * 60 * 60 * 1000;
+var MARK_THROTTLED_MAX_MS = 30 * 60 * 1000;
+var THROTTLE_ESCALATION_HITS = 3;
+var THROTTLE_ESCALATION_WINDOW_MS = 10 * 60 * 1000;
+var MARK_THROTTLED_MIN_INTERVAL_MS = 5 * 1000;
 var AUDIT_ROTATE_BYTES = 10 * 1024 * 1024;
 var AUDIT_KEEP = 5;
 var AUDIT_LINE_MAX = 4000;
@@ -20430,6 +20449,9 @@ class AuthBroker {
         case "mark-exhausted":
           await this.opMarkExhausted(socket, reqId, identity, req.until);
           break;
+        case "mark-throttled":
+          await this.opMarkThrottled(socket, reqId, identity, req.until);
+          break;
         case "refresh-account": {
           const provider = req.provider ?? "anthropic";
           if (!this.providers.has(provider)) {
@@ -20550,9 +20572,15 @@ class AuthBroker {
   isOverageAllowed(account) {
     return (this.config.auth?.allow_overage_accounts ?? []).includes(account);
   }
+  exhaustionMarkOf(account) {
+    const q = this.quota[account];
+    if (!q || q.exhausted_until === undefined)
+      return;
+    return { exhausted_until: q.exhausted_until, marked_at: q.marked_at };
+  }
   isAccountExhausted(account) {
     return isAccountBlocked({
-      mark: this.quota[account],
+      mark: this.exhaustionMarkOf(account),
       snapshot: this.lastQuotaCache[account],
       now: this.now(),
       allowOverage: this.isOverageAllowed(account)
@@ -20605,7 +20633,7 @@ class AuthBroker {
     if (!overageLiftsWall(snapshot, true))
       return false;
     return accountEligibility({
-      mark: this.quota[account],
+      mark: this.exhaustionMarkOf(account),
       snapshot,
       now,
       allowOverage: true
@@ -20615,7 +20643,7 @@ class AuthBroker {
     const snapshot = this.lastQuotaCache[account];
     const allowOverage = this.isOverageAllowed(account);
     const verdict = accountEligibility({
-      mark: this.quota[account],
+      mark: this.exhaustionMarkOf(account),
       snapshot,
       now: this.now(),
       allowOverage
@@ -20733,6 +20761,7 @@ class AuthBroker {
         expiresAt: creds?.claudeAiOauth?.expiresAt,
         exhausted,
         exhausted_until: q?.exhausted_until,
+        throttled_until: q?.throttled_until,
         threshold_violations: this.thresholdViolations[label] ?? 0,
         last_refreshed_at: meta?.lastRefreshedAt,
         last_quota: lq ?? null
@@ -20843,7 +20872,7 @@ class AuthBroker {
     };
     this.lastQuotaCache[label] = snapshot;
     this.persistLastQuotaCache();
-    if (snapshotShouldClearMark(snapshot, this.quota[label], this.now())) {
+    if (snapshotShouldClearMark(snapshot, this.exhaustionMarkOf(label), this.now())) {
       delete this.quota[label];
       this.persistQuota();
       process.stdout.write(`auth-broker: live probe shows ${label} healthy (5h=${snapshot.fiveHourUtilizationPct}% 7d=${snapshot.sevenDayUtilizationPct}%) — cleared stale exhaustion mark
@@ -20961,7 +20990,7 @@ class AuthBroker {
       const existing = this.quota[label]?.exhausted_until;
       if (existing !== undefined && existing >= exhaustedUntil)
         continue;
-      this.quota[label] = { exhausted_until: exhaustedUntil, marked_at: now };
+      this.quota[label] = { ...this.quota[label], exhausted_until: exhaustedUntil, marked_at: now };
       this.persistQuota();
       this.audit({ op: "mark-exhausted", identity: { kind: "operator" }, account: label, accountKind: "claude", ok: true });
       process.stdout.write(`auth-broker: consumer-quota-sensor marked ${label} exhausted until ${new Date(exhaustedUntil).toISOString()} — consumer(s) fail over
@@ -21002,6 +21031,83 @@ class AuthBroker {
     this.audit({ op: "mark-exhausted", identity, account, accountKind: "claude", ok: true });
     socket.write(encodeSuccess(id, { account, rolled, rolledTo }));
   }
+  async opMarkThrottled(socket, id, identity, until) {
+    const account = this.callerAccount(identity);
+    if (!account) {
+      this.audit({ op: "mark-throttled", identity, accountKind: "claude", ok: false, error: "no-active-account" });
+      socket.write(encodeError(id, "ACCOUNT_NOT_FOUND", "no active account configured"));
+      return;
+    }
+    const now = this.now();
+    const throttledUntil = Math.min(Math.max(until, now + 1000), now + MARK_THROTTLED_MAX_MS);
+    const entry = this.quota[account] ?? {};
+    const priorHits = entry.throttle_hits ?? [];
+    const lastHit = priorHits.length > 0 ? priorHits[priorHits.length - 1] : undefined;
+    if (lastHit !== undefined && now - lastHit < MARK_THROTTLED_MIN_INTERVAL_MS) {
+      const refreshed = Math.max(entry.throttled_until ?? 0, throttledUntil);
+      this.quota[account] = { ...entry, throttled_until: refreshed };
+      this.persistQuota();
+      this.audit({ op: "mark-throttled", identity, account, accountKind: "claude", ok: true });
+      process.stdout.write(`auth-broker: mark-throttled ${account} deduped (re-mark within ${MARK_THROTTLED_MIN_INTERVAL_MS / 1000}s) — expiry refreshed, no new hit
+`);
+      socket.write(encodeSuccess(id, {
+        account,
+        throttled_until: refreshed,
+        escalated: false,
+        rolledTo: null
+      }));
+      return;
+    }
+    const hits = priorHits.filter((t) => now - t < THROTTLE_ESCALATION_WINDOW_MS);
+    hits.push(now);
+    const escalate = hits.length >= THROTTLE_ESCALATION_HITS;
+    this.quota[account] = {
+      ...entry,
+      throttled_until: throttledUntil,
+      throttle_hits: escalate ? [] : hits
+    };
+    this.persistQuota();
+    this.audit({ op: "mark-throttled", identity, account, accountKind: "claude", ok: true });
+    process.stdout.write(`auth-broker: mark-throttled ${account} until ${new Date(throttledUntil).toISOString()} ` + `(hit ${hits.length}/${THROTTLE_ESCALATION_HITS} in window)
+`);
+    let escalated = false;
+    let rolledTo = null;
+    if (escalate) {
+      const probe = await this.probeThrottleEscalation(account);
+      if (probe.exhausted) {
+        escalated = true;
+        process.stdout.write(`auth-broker: throttle-escalation probe corroborates wall on ${account} — mark-exhausted + roll
+`);
+        this.audit({ op: "mark-exhausted", identity, account, accountKind: "claude", ok: true, reason: "throttle-escalation" });
+        const roll = await this.markExhaustedAndRoll(account, probe.until ?? undefined, identity);
+        rolledTo = roll.rolledTo;
+      } else {
+        process.stdout.write(`auth-broker: throttle-escalation probe on ${account} did NOT corroborate a wall — staying throttled
+`);
+      }
+    }
+    socket.write(encodeSuccess(id, {
+      account,
+      throttled_until: throttledUntil,
+      escalated,
+      rolledTo: escalated ? rolledTo : null
+    }));
+  }
+  async probeThrottleEscalation(account) {
+    const creds = readAccountCredentials(account, this.home);
+    const token = creds?.claudeAiOauth?.accessToken;
+    if (!token)
+      return { exhausted: false, until: null };
+    let result;
+    try {
+      result = await this.fetchQuotaImpl({ accessToken: token });
+    } catch (err) {
+      this.logErr(`throttle-escalation probe ${account}: ${err.message}`);
+      return { exhausted: false, until: null };
+    }
+    this.cacheQuotaSnapshot(account, result);
+    return quotaIndicatesExhaustion(result, this.isOverageAllowed(account));
+  }
   async markExhaustedAndRoll(account, until, identity) {
     const now = this.now();
     const exhaustedUntil = clampMarkExpiry({
@@ -21010,7 +21116,7 @@ class AuthBroker {
       shortMs: MARK_EXHAUSTED_DEFAULT_MS,
       snapshot: this.lastQuotaCache[account]
     });
-    this.quota[account] = { exhausted_until: exhaustedUntil, marked_at: now };
+    this.quota[account] = { ...this.quota[account], exhausted_until: exhaustedUntil, marked_at: now };
     this.persistQuota();
     const rolledTo = await this.nextHealthyAccountLive(account, this.config.auth?.fallback_order ?? []);
     const rolled = this.fanoutFailoverTo(account, rolledTo);

package/dist/cli/autoaccept-poll.js

@@ -4741,6 +4741,12 @@ var MarkExhaustedRequestSchema = exports_external.object({
   id: exports_external.string().min(1),
   until: exports_external.number().int().positive().optional()
 });
+var MarkThrottledRequestSchema = exports_external.object({
+  v: exports_external.literal(PROTOCOL_VERSION),
+  op: exports_external.literal("mark-throttled"),
+  id: exports_external.string().min(1),
+  until: exports_external.number().int().positive()
+});
 var RefreshAccountRequestSchema = exports_external.object({
   v: exports_external.literal(PROTOCOL_VERSION),
   op: exports_external.literal("refresh-account"),
@@ -4841,6 +4847,7 @@ var RequestSchema = exports_external.discriminatedUnion("op", [
   ListStateRequestSchema,
   SetActiveRequestSchema,
   MarkExhaustedRequestSchema,
+  MarkThrottledRequestSchema,
   RefreshAccountRequestSchema,
   AddAccountRequestSchema,
   RmAccountRequestSchema,
@@ -4860,6 +4867,7 @@ var AccountStateSchema = exports_external.object({
   expiresAt: exports_external.number().optional(),
   exhausted: exports_external.boolean(),
   exhausted_until: exports_external.number().optional(),
+  throttled_until: exports_external.number().optional(),
   threshold_violations: exports_external.number().int().nonnegative().optional(),
   last_refreshed_at: exports_external.number().optional()
 });
@@ -4890,6 +4898,12 @@ var MarkExhaustedDataSchema = exports_external.object({
   rolled: exports_external.array(exports_external.string()),
   rolledTo: exports_external.string().nullable().optional()
 });
+var MarkThrottledDataSchema = exports_external.object({
+  account: exports_external.string(),
+  throttled_until: exports_external.number(),
+  escalated: exports_external.boolean(),
+  rolledTo: exports_external.string().nullable().optional()
+});
 var RefreshAccountDataSchema = exports_external.object({
   account: exports_external.string(),
   expiresAt: exports_external.number().optional()
@@ -5115,6 +5129,15 @@ class AuthBrokerClient {
     const data = await this.send(req);
     return data;
   }
+  async markThrottled(until) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID2(),
+      op: "mark-throttled",
+      until
+    });
+    return data;
+  }
   async claimNotification(key, windowMs) {
     const data = await this.send({
       v: PROTOCOL_VERSION,

package/dist/cli/drive-write-pretool.mjs

@@ -4000,7 +4000,7 @@ function decodeResponse(line) {
   }
   return ResponseSchema.parse(parsed);
 }
-var MAX_FRAME_BYTES, PROTOCOL_VERSION = 1, ProviderNameSchema, GetCredentialsRequestSchema, ListStateRequestSchema, SetActiveRequestSchema, MarkExhaustedRequestSchema, RefreshAccountRequestSchema, AnthropicCredentialsSchema, GoogleCredentialsSchema, MicrosoftCredentialsSchema, ProviderCredentialsSchema, AddAccountRequestSchema, RmAccountRequestSchema, SetOverrideRequestSchema, ListGoogleAccountsRequestSchema, ListMicrosoftAccountsRequestSchema, ProbeQuotaRequestSchema, ClaimNotificationRequestSchema, RequestSchema, GetCredentialsDataSchema, AccountStateSchema, AgentStateSchema, ConsumerStateSchema, ListStateDataSchema, SetActiveDataSchema, MarkExhaustedDataSchema, RefreshAccountDataSchema, AddAccountDataSchema, RmAccountDataSchema, SetOverrideDataSchema, ClaimNotificationDataSchema, GoogleAccountStateSchema, ListGoogleAccountsDataSchema, MicrosoftAccountStateSchema, ListMicrosoftAccountsDataSchema, ErrorBodySchema, SuccessResponseSchema, ErrorResponseSchema, ResponseSchema;
+var MAX_FRAME_BYTES, PROTOCOL_VERSION = 1, ProviderNameSchema, GetCredentialsRequestSchema, ListStateRequestSchema, SetActiveRequestSchema, MarkExhaustedRequestSchema, MarkThrottledRequestSchema, RefreshAccountRequestSchema, AnthropicCredentialsSchema, GoogleCredentialsSchema, MicrosoftCredentialsSchema, ProviderCredentialsSchema, AddAccountRequestSchema, RmAccountRequestSchema, SetOverrideRequestSchema, ListGoogleAccountsRequestSchema, ListMicrosoftAccountsRequestSchema, ProbeQuotaRequestSchema, ClaimNotificationRequestSchema, RequestSchema, GetCredentialsDataSchema, AccountStateSchema, AgentStateSchema, ConsumerStateSchema, ListStateDataSchema, SetActiveDataSchema, MarkExhaustedDataSchema, MarkThrottledDataSchema, RefreshAccountDataSchema, AddAccountDataSchema, RmAccountDataSchema, SetOverrideDataSchema, ClaimNotificationDataSchema, GoogleAccountStateSchema, ListGoogleAccountsDataSchema, MicrosoftAccountStateSchema, ListMicrosoftAccountsDataSchema, ErrorBodySchema, SuccessResponseSchema, ErrorResponseSchema, ResponseSchema;
 var init_protocol = __esm(() => {
   init_zod();
   MAX_FRAME_BYTES = 64 * 1024;
@@ -4029,6 +4029,12 @@ var init_protocol = __esm(() => {
     id: exports_external.string().min(1),
     until: exports_external.number().int().positive().optional()
   });
+  MarkThrottledRequestSchema = exports_external.object({
+    v: exports_external.literal(PROTOCOL_VERSION),
+    op: exports_external.literal("mark-throttled"),
+    id: exports_external.string().min(1),
+    until: exports_external.number().int().positive()
+  });
   RefreshAccountRequestSchema = exports_external.object({
     v: exports_external.literal(PROTOCOL_VERSION),
     op: exports_external.literal("refresh-account"),
@@ -4129,6 +4135,7 @@ var init_protocol = __esm(() => {
     ListStateRequestSchema,
     SetActiveRequestSchema,
     MarkExhaustedRequestSchema,
+    MarkThrottledRequestSchema,
     RefreshAccountRequestSchema,
     AddAccountRequestSchema,
     RmAccountRequestSchema,
@@ -4148,6 +4155,7 @@ var init_protocol = __esm(() => {
     expiresAt: exports_external.number().optional(),
     exhausted: exports_external.boolean(),
     exhausted_until: exports_external.number().optional(),
+    throttled_until: exports_external.number().optional(),
     threshold_violations: exports_external.number().int().nonnegative().optional(),
     last_refreshed_at: exports_external.number().optional()
   });
@@ -4178,6 +4186,12 @@ var init_protocol = __esm(() => {
     rolled: exports_external.array(exports_external.string()),
     rolledTo: exports_external.string().nullable().optional()
   });
+  MarkThrottledDataSchema = exports_external.object({
+    account: exports_external.string(),
+    throttled_until: exports_external.number(),
+    escalated: exports_external.boolean(),
+    rolledTo: exports_external.string().nullable().optional()
+  });
   RefreshAccountDataSchema = exports_external.object({
     account: exports_external.string(),
     expiresAt: exports_external.number().optional()
@@ -4376,6 +4390,15 @@ class AuthBrokerClient {
     const data = await this.send(req);
     return data;
   }
+  async markThrottled(until) {
+    const data = await this.send({
+      v: PROTOCOL_VERSION,
+      id: randomUUID(),
+      op: "mark-throttled",
+      until
+    });
+    return data;
+  }
   async claimNotification(key, windowMs) {
     const data = await this.send({
       v: PROTOCOL_VERSION,